Less eavesdropping losses induce more eavesdropping information gain 
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The eavesdropping scheme proposed by Wojcik [Phys. Rev. Lett. 90,157901(2003)] on 

2^ I the quantum communication protocol of Bostrom and Felbinger [Phys. Rev. Lett. 89, 

^D I 187902(2002)] is improved by constituting a new set of attack operations. The improved 

scheme only induces half of the eavesdropping losses in Wojcik's scheme, therefore, in a 

^ I larger domain of the quantum channel transmission efficiency 77, i.e., [0,75%], the eavesdrop- 

I per Eve can attack all the transmitted bits. Comparing to Wojcik's scheme, in the improved 

r\i ^ scheme the eavesdropping (legitimate) information gain does not vary in the 7/ domain of 

[0, 50%], while in the 77 domain of (50%, 75%] the less eavesdropping losses induce more 

^ I eavesdropping information gains, for Eve can attack all the transmitted bits and accordingly 

ly^ I eavesdropping information gains do not decrease. Moreover, for the Bostrom-Felbinger 

(•^ , paper, that is, according to Wojcik's eavesdropping scheme, the Bostrom-Felbinger protocol 



is not secure for transmission efficiencies lower than almost 60%, while according to the 
improved scheme, it is not secure for transmission efficiencies lower than almost 80%. 



o 

:a 

^ ; PACS number(s): 03.67.Hk, 03.65.Ud 

Q^, Quantum key distribution (QKD) is an ingenious application of quantum mechanics, in which 

two remote legitimate users (Alice and Bob) establish a shared secret key through the transmis- 
V . sion of quantum signals. Much attention has been focused on QKD after the pioneering work of 

3 , Bennett and Brassard published in 1984 [1]. Till now there have been many theoretical QKDs 

[2-20]. Different from the QKDs, the deterministic secure direct communication protocol is to 
transmit directly the secret messages without first generating QKD to encrypt them. Hence it 
is very useful and usually desired, especially in some urgent time. However, the deterministic 
secure direct communication is more demanding on the security than QKDs. Therefore, only 
recently a few of deterministic secure direct protocols have been proposed [21-24]. One of them 
is the famous Bostrom-Felbinger protocol [22] , which allows the generation of a deterministic key 
or even direct secret communication. In Ref [22] the protocol has been claimed to be secure and 
experimentally feasible. However, since the security of the Bostrom-Felbinger protocol can be 
impaired as far as considerable quantum losses are taken into account, very recently Wojcik has 
presented an undetectable eavesdropping scheme on the Bostrom-Felbinger protocol[25]. Wojcik's 
eavesdropping scheme induces the eavesdropping losses at the level of 50% and the anticorrela- 
tion of the state of the home photon (kept by Bob, the legitimate receiver of secret messages) 



with that of the travel photon (sent by Bob to Alice, the sender of secret messages). If the 
transmission efficiency rj of the quantum channel is not taken into account, the probability of 
the eavesdropper (i.e.. Eve) being detected is zero due to the anticorrelation. However, in the 
case of the considerable quantum channel losses, it is possible for legitimate users to detect the 
eavesdropping by observing the quantum channel losses. That is, although Eve can attack all the 
transmitted bits and the eavesdropping losses can be hidden in the channel losses when rj < 50%, 
if she attacks all the transmitted bits when 77 > 50%, then the eavesdropping losses is greater 
than the channel losses and accordingly the legitimate users can find Eve in the line by observing 
the channel losses. In fact, when 77 > 50%, it is still possible for Eve to avoid the legitimate users' 
detection, for she can eavesdrop only the fraction /i = 2(1 — 77) of the transmitted bits to induce 
less eavesdropping losses, which can be completely hidden in the quantum channel losses. Hence, 
in [25] it is concluded that the Bostrom-Felbinger protocol is not secure for transmission efficien- 
cies lower than almost 60%, i.e., the insecurity upper bound of ry is 60%. Nonetheless, in the case 
of ?7 > 50%, the eavesdropping (legitimate) information gain will surely decrease (increase) due 
to eavesdropping only a fraction of the whole transmitted bits. Then it is intriguing to ask, in 
a low- loss quantum channel (i.e., a high transmission efficiency channel), whether Eve can have 
more information gain in a way of reducing the eavesdropping losses such that she is able to 
eavesdrop all the transmitted bits in a larger domain of rj. If so, then the insecurity upper bound 
of rj presented by Wojcik can be pushed up. To address the question, in this brief report, we im- 
prove the the Wojcik's eavesdropping scheme [25] by constituting a new set of attack operations. 
Our improved eavesdropping scheme indeed induces less eavesdropping losses than that in [25], 
therefore, in a larger domain of ry. Eve can attack all the transmitted bits. Since when rj = 1 the 
eavesdropping (legitimate) information gain does not decrease (increase) with the decrease of the 
eavesdropping losses, the larger domain in which Eve can attack all the transmitted bits means 
that less eavesdropping losses may induce more eavesdropping information gain. Hence, for the 
Bostrom-Felbinger protocol, the insecurity upper bound of the transmission efficiency presented 
by Wojcik can be pushed up. One will see these later. 

Let us start with the brief description of the Bostrom-Felbinger protocol [22]. Bob prepares two 
photons in the entangled state |^+) = (|0)|1) + |l)|0))/\/2 of the polarization degrees of freedom. 
He stores one photon (home photon) in his lab and sends Alice the other one (travel photon) 
via a quantum channel. After receiving the travel photon Alice randomly switches between the 
control mode and the message mode. In the control mode Alice measures the polarization of the 
travel photon first and then announces publicly the measurement result and the measurement 
basis she used. After knowing Alice's announcement Bob also switches to the control mode 
to measure the home photon in the same basis as that Alice used. Then he compares both 
measurement results. They should be perfectly anticorrelated in the absence of Eve. Therefore, 
the appearance of identical results is considered to be the evidence of eavesdropping, and if it 
occurs the transmission is aborted. In the other case, the transmission continues. In the message 
mode, Alice performs the Z^{j G {0, 1}) operation on the travel photon to encode j and sends it 
back to Bob, where Z = |G)(0| — |1)(1|. After receiving the travel photon Bob measures the state 
of both photons in the Bell basis to decode the j ~ 0(1) corresponding to the |\I'+)(|\I'^)) result. 



Now along the line of Wojcik's eavesdropping scheme [25], we present detailedly the improved 
scheme, which never produces the identical results of the measurements performed by Bob and 
Alice in the control mode also but induces less eavesdropping losses than that in [25]. Let us 
first consider an ideal quantum channel (i.e., rj = I). Obviously, Eve has no access to the home 
photon but can manipulate the travel photon while it goes from Bob to Alice and back from 
Alice to Bob. Eve uses two auxiliary spatial modes x,y. She prepares a photon in the state |0) 
and lets the other one be an empty mode, e.g., in the state |vac)a;|0)y. Accordingly, the state of 
the whole system including the entangled photon pair is 

\initial) = |1'+)^t|vac)^|0)j;. (1) 

When Bob sends the travel photon to Alice, Eve attacks the quantum channel by manipulating 
the travel photon through an unitary operation (referred as to be the B — A attack hereafter) as 
follow, 

T = NxyCytxNtyCtxyHy, (2) 

where N represents the CNOT gate [25], H is the Hadamard gate, and C stands for the so-called 
three-mode CPBS gate [25], which is constructed by CNOT gates and a polarizing beam splitter 
transmitting (reflecting) photons in the state |0)(|1)). When acting on the initial state, the B — A 
attack transforms the whole system to the state \B — A) — T\initial) of the form 

\B^A) = i|0),(|vac),|l),|0), + |l),|l),|vac),) 

+ i|l)^(||0),vac),|l), + |0),|0),|vac),). (3) 

Suppose that Alice now switches to the control mode and measures the state of the mode t. 
According to equation 3, one can see that after the B-A attack Alice will detect no photon with 
the probability 1/4 or with the probability of 3/4 a photon whose state is perfectly anticorrelated 
with the state of the home photon. Therefore, the probability of eavesdropping detection based 
on the correlation observation equals zero. This point is completely same as that in Ref. [25]. 
Moreover, from equation 3 one can see that the B — A attack in the present eavesdropping 
scheme also induces the eavesdropping losses. However, it is worthy to be mentioned that the 
eavesdropping losses level (25%) in the present scheme is only half of that (50%) in Ref. [25]. This 
implies that, comparing to the Wojcik's eavesdropping scheme, in the present eavesdropping 
scheme, the domain in which Eve can attack all the transmitted bits is enlarged to be [0, 75%] 
from the [0, 50%] in Ref. [25]. Nonetheless, this does not certainly mean that, the insecurity 
upper bound of transmission efficiency presented by Wojcik can be pushed up, for now we still do 
not know the variation of the eavesdropping (legitimate) information gain. Let us now analyze 
the performance of the scheme in the case of Alice operating in the message mode. After Alice 
performs the Z^ operation and sends the travel photon back to Bob, Eve performs her second 
attack (named as the A — B attack hereafter) on the travel photon. The A~ B attack consists of 
the unitary operation T~^ . After the A — B attack, the corresponding state of the whole system 



\A-B) = T-^zi\B-A) 



= -i=(|0),,|l),b% + |l);,|0),|0),)|vac), 

- ^(l*+)ht|j), + |*-)ht|j), + |*+>ht|0),-|*-)„t|0),)|vac),. (4) 

The final step of tlie eavesdropping sclienie is a measurement of polarization performed on the 
y photon, the result is denoted by k. The result of Bob's Bell-state measurement on both 
photons is denoted by m ~ 0(1) corresponding to the |^^)/it(|^^)/it) state. Let P{k, m\j) be the 
conditional probability of possible measurement outputs of |^ — i?) for a given value of j, then 
the only nonzero probabilities are, 

P/(0,0|0)-1, PK0,0|l)-P/(0,l|l) = P/(l,0|l) = P/(l,l|l) = l/4. (5) 

Assume that in Alice's secret messages, the occupation possibilities of the '0' and the T' bits 
are cq and 1 — cq respectively, then one can work out the mutual information between any two 
parties, 

Iae = Iab = Co- -[(1 -co)log2(l - cq) + (1 + co)log2(l + cq)], (6) 

IbE = -(1 + Co) l0g2(l + Co) + i-^ l0g2(l - Co) + ^-^ log2(l + 3co). (7) 



Specifically, when cq = 1/2, then 



Iae = Iab = j loga - w 0.311 



/BB = l-^log23+^log25«0.074. (8) 

Same as Wojcik's eavesdropping scheme, the present scheme is also not symmetric. If after the 
A — B attack Eve performs an additional unitary operation 5* = XtZtNtyXt with the probability 
of 1/2, where X is an negation, then the asymmetry can be removed. If the S is performed, the 
final state of the whole system is transformed into 



\A-By'> = ST-^Zl\B-A) 
1 

V2 
1 



— (|0)/.|l)*b%-|l)/.|0)t|l),)|vac) 



2(l*+)'^tb% + l*~)/.*b% - l*+)^t|l)y + |*-)ht|l)y)|vac),. (9) 

Then the only nonzero P{k, ?n|j)'s are, 

Pf ^(0, G|0) = P)'^(0, 1|0) = P|'^(l, G|0) = P)'^(l, 1|0) = 1/4, PJ"'(1, 1|1) = 1. (10) 

Considering the assumption that in Alice's secret messages the occupation possibilities of the '0' 
and the '1' bits are cq and 1 — cq respectively, one can work out the mutual information between 
any two parties, 

IaI = ^ab - 1 - Co - ^ [co log2 CO + (2 - co) log2 (2 - cq)] , (11) 

I^^l = -(2 - Co) log2(2 - Co) + I log2 CO + i^ log2(4 - 3co). (12) 



Specifically, when cq = 1/2, then 



A%-A^A-Jlog2^-0.311 



As) _ As) 



4B-l-^log23+^log25«0.074. (13) 

Incidentally, it is easily found that, when cq ^ 1/2 (Note that cq = or cq = 1 is meaningless), 
Iae 7^ Iae^ ^ab 7^ Iab '^"^^ ^BE 7^ I BE- Same as that in Ref.[25], later we only consider the 
case of Cq = 1/2. 

According to the viewpoint in Ref.[25], that is, since Eve knows exactly when each of the 
S operations has been performed, the synimetrization procedure docs not reduce the mutual 
information between Alice and Eve while it disturbs the communication between Alice and Eve 
in such a way the mutual information between Alice and Bob is reduced, in the present scheme 
after the S operations the mutual information between Alice and Bob is also reduced to be 
/Aij-|log23-l« 0.189. 

By the way, one can easily find that in the present eavesdropping scheme the quantum bit error 
rate induced by the eavesdropping is also at the same level of 1/4 as that in Ref.[25]. 

Thus far, we have improved Wojcik's eavesdropping scheme. One can see that the improved 
scheme is almost same as Wojcik's eavesdropping scheme except for the induced eavesdropping 
losses. Hence, all the discussions in Ref.[25] except for those related to the eavesdropping losses 
are also suitable for the present paper and we will not repeat them. Now let us discuss a very 
important property related with the eavesdropping losses. According to our above calculations 
of the mutual information, one can see that, when rj = 1, comparing to Wojcik's eavesdropping 
scheme, the eavesdropping (legitimate) information gain does not decrease (increase) with the 
decrease of the eavesdropping losses in the improved scheme. As mentioned before, in the im- 
proved scheme the 77 domain in which Eve can attack all the transmitted bits is enlarged to be 
[0, 75%] from the [0, 50%] in Ref.[25]. In the -q domain of (50%, 75%], the eavesdropping infor- 
mation gain does not decrease in the improved scheme but in Wojcik's eavesdropping scheme. 
Thus, in this sense, one can say that the less eavesdropping losses do induce more eavesdropping 
information gain. Moreover, in the improved scheme, when 77 increases from 75%, though the 
mutual information between Alice and Eve (Bob) will decrease (increase) for Eve can only attack 
a fraction of the whole transmitted bits, the Iae is still able to exceed the Iab up to almost 80% 
transmission efficiency (cf. Fig.l). 

In summary, we have improved Wojcik's eavesdropping scheme on the Bostrom-Felbinger quan- 
tum communication protocol. The improved scheme only induces half of the eavesdropping losses 
in Wojcik's scheme and accordingly in the 77 domain of [0, 75%] Eve can attack all the transmitted 
bits. When 77 = 1 the eavesdropping (legitimate) information gain docs not accordingly decrease 
(increase). Hence, in the 77 domain of (50%, 75%], the less eavesdropping losses do induce more 
eavesdropping information gain. Moreover, as for as the Bostrom-Felbinger protocol is concerned, 
the insecurity upper bound of the transmission efficiency has been pushed up from the 60% in 
Wojcik's scheme to 80% in the present scheme. 
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FIG. 1; Mutual information between Alice and Eve (Bob) Iae{Iab) as a function of quantum channel 
transmission efficiency rj. According to the figure 4 in Ref.[25], when rj increases form 75%, Iab in this 
figure should increase not linearly but more slowly. We simplify it just because wc only want to estimate 
an approximate upper bound. 
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